diff --git a/Dockerfile.rds-postgres-db b/Dockerfile.rds-postgres-db
index 9e50d27..29145e6 100644
--- a/Dockerfile.rds-postgres-db
+++ b/Dockerfile.rds-postgres-db
@@ -6,7 +6,7 @@ FROM public.ecr.aws/nullplatform/scopes/worker-bridge:1.0.0
 
 RUN apk add --no-cache aws-cli gomplate postgresql16-client
 
-ARG TOFU_VERSION=1.10.10
+ARG TOFU_VERSION=1.12.6
 ARG TARGETARCH
 RUN curl -fsSL "https://github.com/opentofu/opentofu/releases/download/v${TOFU_VERSION}/tofu_${TOFU_VERSION}_linux_${TARGETARCH}.tar.gz" \
       | tar -xz -C /usr/local/bin tofu \
diff --git a/Dockerfile.rds-postgres-server b/Dockerfile.rds-postgres-server
index 2e08d4b..5356658 100644
--- a/Dockerfile.rds-postgres-server
+++ b/Dockerfile.rds-postgres-server
@@ -7,7 +7,7 @@ FROM public.ecr.aws/nullplatform/scopes/worker-bridge:1.0.0
 RUN apk add --no-cache aws-cli gomplate
 
 # OpenTofu >= 1.10 (S3 backend with use_lockfile); alpine packages 1.7.x.
-ARG TOFU_VERSION=1.10.10
+ARG TOFU_VERSION=1.12.6
 ARG TARGETARCH
 RUN curl -fsSL "https://github.com/opentofu/opentofu/releases/download/v${TOFU_VERSION}/tofu_${TOFU_VERSION}_linux_${TARGETARCH}.tar.gz" \
       | tar -xz -C /usr/local/bin tofu \